Can't pull custom security attributes when setting Dynamic User in Security Group

Question

I am trying to populate users into a Security group using custom security attributes with an attribute set of "site locations" when setting Dynamic User in Membership Type but it is failing.

I can pull the custom attributes from the user account from exchange using user.extensionAttribute1 -eq "Houston".

This does pull up the user however I do not want to go thru exchange and user account if I don't have to.

I would rather predefine custom security attribute that we can assign to users for different security groups and AU's

Answer 1

You cannot currently leverage custom security attributes for Dynamic group membership filters. It's a common ask though, so Microsoft will hopefully include it in the future. In the meantime, best thing you can do here is vote the corresponding suggestion over at the Feedback portal: https://feedback.azure.com/d365community/idea/c766c341-2ec6-ec11-a81b-0022484ee92d